Credit Reporting Data Management Policy

Metcash Limited ACN 112 073 480, including Mitre 10 Australia Pty Ltd, their related bodies corporate and business pillars (collectively, “Metcash”, “we”, “our” or “us”) is committed to the protection of personal privacy within the scope of applicable law. This Credit Reporting Data Management (CRDM) Policy covers Metcash's collection, management and disclosure of credit information and credit eligibility information held by it and should be read in conjunction with our Privacy Policy. This CRDM Policy also addresses a number of matters required under the Credit Reporting Code of Conduct (CR Code).

Metcash may update this CRDM Policy from time to time. The most current version will be located on the Metcash website at www.metcash.com and is also available by contacting our National Credit Manager by email or at the address detailed below. Types of Credit Information that Metcash collects and holds

information about your commercial creditworthiness from businesses which provides information about commercial creditworthiness.

Identifying details such as your name, birth date, driver’s licence number, address(es), telephone number(s) from information that you provide to us (including your completed Application for Trading Account) or that is provided by third parties acting on your behalf.

Use of Banker’s OpinionsMetcash may seek and obtain a banker’s opinion for credit related purposes connected with your business, trade or profession where permitted under the Privacy Act. Use of Trade Insurers In relation to an application by your business for commercial credit, Metcash may ask a trade insurer to obtain credit reporting information about you for the purposes of assessing whether to insure or the risk of insuring Metcash or assessing the risk of default by your business and/or you in your capacity as Guarantor on the commercial Credit Application.

Other Uses of Credit InformationCredit Information obtained by Metcash may be used for credit related purposes and to notify Metcash’s successor and assigns, financiers and/or any assignees or any lender to an assignee of Metcash’s interests in any amount(s) payable arising under the Trading Terms between you or your business and Metcash from time to time.

How Metcash stores and protects personal information Metcash stores personal credit information and credit eligibility information in a combination of computer storage facilities, paper-based files and other records. In so doing, we have taken numerous steps to protect your personal information from misuse, interference and loss, and unauthorised access, modification or disclosure.

Additionally Metcash takes reasonable steps to destroy or permanently de-identify personal information when we no longer need it and in accordance with the Privacy Act. The internet is not a secure method of transmitting information. Accordingly, other than where Metcash uses secure socket layer technology (SSL) to ensure information (such as credit card information) is securely transmitted and processed, Metcash cannot and does not accept responsibility for the security of information you send to or receive from us over the internet, or for any unauthorised access or use of that information.

How you can access your Credit Information Metcash will take reasonable steps to make sure that the Credit Information we collect, use or disclose is accurate, complete and up to date. If your personal details change, such as your address or phone number, please contact our National Credit Manager by email or at the address detailed below.

At your request to the National Credit Manager, Metcash will provide you with a copy of any Credit Information which we hold about you, unless an exception under the Privacy Act 1988 applies. We may charge a fee for retrieving this information, in which case we will inform you of the fee and obtain your agreement to that fee before providing the information.

In accordance with the Privacy Act, Metcash will:

Upon request, provide access to credit eligibility information within a reasonable timeframe.

If access is refused, Metcash will provide you with the contact details for our External Dispute Resolution Scheme (EDRS) and the Office of the Australian Information Commissioner (OAIC) to enable you to escalate your request

How you can request the correction of your Credit Information If you have accessed your Credit Information from Metcash or our Credit Reporting Bodies and believe that it is not accurate, up to date, complete, irrelevant, or misleading, then you can request our National Credit Manager or Credit Reporting Body to correct it. Metcash will comply with the Privacy Act in relation to any request for the correction of your Credit Information.

In the course of the investigation process, we may consult with and disclose information to our Credit Reporting Bodies and/or other Credit Providers. If our investigations reveal that your Credit Information does not require correction then we will advise you of this in writing and provide you with the contact details for the EDRS and the OAIC to enable you to escalate your request.

How your Credit Information may impact your Application for a Trading Account Metcash may refuse an Application for a Trading Account based wholly or partly on your Credit Information.

Metcash will comply with the Privacy Act in relation to any refusal for an Application for a Trading Account.

How to make a complaint If you believe that Metcash or our Credit Reporting Bodies has breached the CR Code or Part IIIA (e.g. data quality issues) of the Privacy Act or not taken reasonable steps to destroy Credit Information which is no longer relevant or required then you may complain using the contact details listed at the bottom of this document.

Metcash will deal with any complaints in accordance with the Privacy Act. In the course of investigating your complaint, Metcash may consult with and disclose information to our Credit Reporting Bodies and/or other Credit Providers. If you are not satisfied with our response to your complaint then we will provide you with the contact details for our EDRS and the OAIC to enable you to escalate your complaint.

Metcash is committed to ensuring that we promptly acknowledge and investigate any complaint about the way we manage your credit Information.

How to contact the Credit Reporting Bodies

You may contact our Credit Reporting Bodies by using the following information. If you have any questions regarding your publicly held personal credit file then please contact Veda & Dun & Bradstreet as follows:-

How to contact Metcash If you have any questions about this CRDM Policy, if you wish to update or correct information we hold about you or if you wish to make a complaint about our collection, use, management or disclosure of your personal information under this CRDM Policy then please, in the first instance, contact: